Lucene search

[email protected]CVE-2016-6457

HistoryNov 19, 2016 - 3:03 a.m.

CVE-2016-6457

2016-11-1903:03:00

CWE-119

[email protected]

web.nvd.nist.gov

cisco

nexus 9000

aci

vulnerability

dos

cisco security advisory

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

42.1%

JSON

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches (TOR) - ACI Mode and Cisco Application Policy Infrastructure Controller (APIC). More Information: CSCuy93241. Known Affected Releases: 11.2(2x) 11.2(3x) 11.3(1x) 11.3(2x) 12.0(1x). Known Fixed Releases: 11.2(2i) 11.2(2j) 11.2(3f) 11.2(3g) 11.2(3h) 11.2(3l) 11.3(0.236) 11.3(1j) 11.3(2i) 11.3(2j) 12.0(1r).

Affected configurations

NVD

Node

ciscoapplication_policy_infrastructure_controllerMatch1.2\(2\)

ciscoapplication_policy_infrastructure_controllerMatch1.2\(3\)

ciscoapplication_policy_infrastructure_controllerMatch1.3\(1\)

ciscoapplication_policy_infrastructure_controllerMatch1.3\(2\)

ciscoapplication_policy_infrastructure_controllerMatch2.0\(1\)

Node

cisconx-osMatch11.2\(2g\)

cisconx-osMatch11.2\(2h\)

cisconx-osMatch11.2\(2i\)

cisconx-osMatch11.2\(3c\)

cisconx-osMatch11.2\(3e\)

cisconx-osMatch11.2\(3h\)

cisconx-osMatch11.3\(1i\)

cisconx-osMatch11.3\(2f\)

cisconx-osMatch11.3\(2h\)

cisconx-osMatch11.3\(2i\)

cisconx-osMatch12.0\(1m\)

cisconx-osMatch12.0\(1n\)

cisconx-osMatch12.0\(1o\)

cisconx-osMatch12.0\(1p\)

cisconx-osMatch12.0\(1q\)

AND

cisconexus_92160yc-xMatch-

cisconexus_92304qcMatch-

cisconexus_9236cMatch-

cisconexus_9272qMatch-

cisconexus_93108tc-exMatch-

cisconexus_93120txMatch-

cisconexus_93128txMatch-

cisconexus_93180yc-exMatch-

cisconexus_9332pqMatch-

cisconexus_9336pq_aci_spineMatch-

cisconexus_9372pxMatch-

cisconexus_9372txMatch-

cisconexus_9396pxMatch-

cisconexus_9396txMatch-

cisconexus_9504Match-

cisconexus_9508Match-

cisconexus_9516Match-

CPENameOperatorVersion
cisco:application_policy_infrastructure_controllercisco application policy infrastructure controllereq1.2\(2\)
cisco:application_policy_infrastructure_controllercisco application policy infrastructure controllereq1.2\(3\)
cisco:application_policy_infrastructure_controllercisco application policy infrastructure controllereq1.3\(1\)
cisco:application_policy_infrastructure_controllercisco application policy infrastructure controllereq1.3\(2\)
cisco:application_policy_infrastructure_controllercisco application policy infrastructure controllereq2.0\(1\)

CPE	Name	Operator	Version
cisco:application_policy_infrastructure_controller	cisco application policy infrastructure controller	eq	1.2\(2\)
cisco:application_policy_infrastructure_controller	cisco application policy infrastructure controller	eq	1.2\(3\)
cisco:application_policy_infrastructure_controller	cisco application policy infrastructure controller	eq	1.3\(1\)
cisco:application_policy_infrastructure_controller	cisco application policy infrastructure controller	eq	1.3\(2\)
cisco:application_policy_infrastructure_controller	cisco application policy infrastructure controller	eq	2.0\(1\)

CNA Affected

[
  {
    "product": "Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) 11.2(2x) through 12.0(1x)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) 11.2(2x) through 12.0(1x)"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94077

www.securitytracker.com/id/1037185

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102-n9kapic

Social References

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

42.1%

JSON

Related for CVE-2016-6457

openvas2 nvd1 cisco1 nessus1 prion1 cvelist1